根据德克萨斯州总检察长发布的信息，网络安全公司 Cameron Fozi 指出，去年甲骨文公司（Oracle Corp.）医疗部门发生的一起网络安全漏洞事件导致近 2000 万人的个人信息被窃取。
A cybersecurity breach last year of Oracle Corp.’s healthcare unit compromised personal information belonging to nearly 20 million people, according to information released by the Texas attorney general.
德克萨斯州总检察长在周五发布的一份报告中称，该公司透露，近 2000 万人（其中包括约 300 万德克萨斯州居民）的社会安全号、地址和医疗信息在黑客攻击中被盗。甲骨文于 2025 年 3 月向部分客户发出网络攻击警报，称该事件发生在 1 月 22 日之后的某个时间，不过这家总部位于德克萨斯州的公司并未公布受影响的患者电子健康记录数量。
In a report issued Friday, the Texas AG said the company disclosed that Social Security numbers, addresses and medical information of almost 20 million people, including about 3 million Texans, were taken in the hack. Oracle in March 2025 alerted some customers to the cyberattack, saying it occurred sometime after Jan. 22, although the Texas-based company didn’t release the number of patients’ electronic health records that were affected.
甲骨文周一拒绝就此次披露发表评论。德克萨斯州总检察长办公室未回应置评请求。
Oracle declined to comment Monday on the disclosure. The Texas attorney general’s office didn’t respond to requests for comment.
甲骨文的医疗客户包括区域医院和诊所、国防部以及退伍军人事务部。目前尚不清楚此次数据泄露可能如何影响甲骨文的联邦政府客户，尽管退伍军人事务部的一位发言人在 2025 年 3 月披露此事时表示未受影响。
Oracle’s healthcare customers include regional hospitals and clinics, the Department of Defense and the Department of Veterans Affairs. It’s unclear how the breach may have affected Oracle’s federal government customers, although a spokesperson for Veterans Affairs said at the time of the March 2025 disclosure that it wasn’t affected.
德克萨斯州医疗系统 Christus Health 和加利福尼亚州的 Tri-City 医疗中心表示，泄露的严重程度因患者而异，但被盗信息可能包括姓名、社会安全号、主治医生、诊断结果、药物、检测结果及其他信息。
Texas medical system Christus Health and the Tri-City Medical Center in California said the severity of the breach varied by patient but the compromised information could include names, Social Security numbers, doctors, diagnoses, medicines, test results and other information.
据彭博社 2025 年 3 月报道，这两个组织表示他们是受此次泄露影响的众多甲骨文客户之一。联邦调查局（FBI）对此次网络攻击以及黑客迫使医疗公司支付赎金的企图进行了调查。
The two organizations said they were among many Oracle customers affected by the breach. The FBI investigated the cyberattack and attempts by hackers to force medical companies to pay ransoms, Bloomberg News reported in March 2025.
在 2025 年 3 月的披露中，甲骨文告诉客户，攻击者访问了 Cerner Corp. 的旧服务器，甲骨文于 2022 年以 280 亿美元收购了该公司。根据通知，该公司表示数据尚未转移到甲骨文的云存储服务中。
In the March 2025 disclosure, Oracle told customers that the attackers accessed older servers from Cerner Corp., which Oracle acquired in 2022 for $28 billion. The company said the data hadn’t yet been shifted to Oracle’s cloud storage service, according to the notice.